IETF Logo Mail Archive

[TLS] Re: [EXT] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)

"Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu> Mon, 29 June 2026 04:34 UTC

Return-Path: <prvs=3640980a80=uri@ll.mit.edu>
X-Original-To: tls@mail2.ietf.org
Delivered-To: tls@mail2.ietf.org
Received: from localhost (localhost [127.0.0.1]) by mail2.ietf.org (Postfix) with ESMTP id D2D7810991866 for <tls@mail2.ietf.org>; Sun, 28 Jun 2026 21:34:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=ietf.org; s=ietf1; t=1782707689; bh=Rj5X31YcZbyfYv0zjhI+Hqld8oOKyonAGw/HFZvvgB8=; h=From:To:Subject:Date:References:In-Reply-To; b=fwjgxyMI6XqxNpr/q8uA/BUKZoZnJjc7eB/4aGvyYZd9QC+H/w0AGRud6lqdbZrbl waC925wgJ9n9Q4ZhEZfdBjuhaVZdzKXH9pX3F2tKxmO/NtS1yTXFbrcOeYrPY1C+Hw PgAepYMZX55YIFRFR46Q8NRr4DgUC1mcLMAkuwo0=
X-Virus-Scanned: amavisd-new at ietf.org
X-Spam-Flag: NO
X-Spam-Score: -2.695
X-Spam-Level:
X-Spam-Status: No, score=-2.695 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, DKIM_SIGNED=0.1, DKIM_VALID=-0.1, DKIM_VALID_AU=-0.1, HTML_MESSAGE=0.001, RCVD_IN_DNSWL_LOW=-0.7, RCVD_IN_VALIDITY_CERTIFIED_BLOCKED=0.001, RCVD_IN_VALIDITY_RPBL_BLOCKED=0.001, SPF_HELO_NONE=0.001, SPF_NONE=0.001] autolearn=ham autolearn_force=no
Authentication-Results: mail2.ietf.org (amavisd-new); dkim=pass (2048-bit key) header.d=ll.mit.edu
Received: from mail2.ietf.org ([166.84.6.31]) by localhost (mail2.ietf.org [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id XpqMKbkRbXxP for <tls@mail2.ietf.org>; Sun, 28 Jun 2026 21:34:49 -0700 (PDT)
Received: from MX3.LL.MIT.EDU (mx3.ll.mit.edu [129.55.12.52]) by mail2.ietf.org (Postfix) with ESMTP id 5C0A810991859 for <tls@ietf.org>; Sun, 28 Jun 2026 21:34:49 -0700 (PDT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=ll.mit.edu; h= content-type:date:from:in-reply-to:message-id:mime-version :references:subject:to; s=dkim3; bh=u2ti+l+hP6U4NxVSK5Dpbanl0KDV DlAe+WubztKpnLI=; b=bB9YvD+9BmSWj+noaa1Tf42QK11pk9wcnlWvLgaNDjQE 8dRFBSiY/1dHtPVLZqGxpJ6QfECqwJRMahvo2EegOQffl9BUuJ1C1+J5gEYcbecr Bd2tIJ7L4B9F7hI4jmL6AH/nLwswVhGuVtQhEOIGJT2r7lq8O+EK2hCAZJNFpDcU TNJpzkTbjv5lUxVURqKul2qmjJbDy3/xdybiXwAeRSRwF/Pi4zl4KR5E1jmUWV1f urXkgPqEclFssCcG08KqLD3+EC7ydBFWnp/zmLukCUbKW4oa0a2PBEf5+UiLHGnZ naTVkKeP97E+hPt1HBJ+dVa7uskLUsP7F+8RBk/HQA==
Received: from LLEX2019-03.mitll.ad.local (llex2019-03.llan.ll.mit.edu [172.25.4.99]) by MX3.LL.MIT.EDU (8.18.1.7/8.18.1.7) with ESMTPS id 65T4YfY1069957 (version=TLSv1.2 cipher=ECDHE-RSA-AES256-GCM-SHA384 bits=256 verify=FAIL); Mon, 29 Jun 2026 00:34:41 -0400
ARC-Seal: i=1; a=rsa-sha256; s=arcselector5401; d=microsoft.com; cv=none; b=Qp6Xm74LaggpHwQUyRAzi5a7287ToRm9PG9sN8HVnpUoPNe2NdBm5h8/Cmi/S2zQwztbMiArHNjgbi2R12jiU+NZBfvlLy9hcbPNEoPPIDLuOBdUFv1XoLP6KRZ9CZ3uBQyl+pPyrGBcYEAfKw8o5G3ia5P68zW4bZPUmcDxkWQfj51yNoco/qZ2MPKV5kWlzWnbdzs9PRVVkiUCkE7PzjT/JixQw9ekgpNFQd4ZWRBICuTe+cf4rlMyaoNJ4ELc+CUPZmmfwSsy+j7h1RUbIG6AzTTwT7ciad6kusFGWd43hO2y1xpeQdhwAqDE8WdMG/xJ+yKfi984CLBk2vkY6Q==
ARC-Message-Signature: i=1; a=rsa-sha256; c=relaxed/relaxed; d=microsoft.com; s=arcselector5401; h=From:Date:Subject:Message-ID:Content-Type:MIME-Version:X-MS-Exchange-AntiSpam-MessageData-ChunkCount:X-MS-Exchange-AntiSpam-MessageData-0:X-MS-Exchange-AntiSpam-MessageData-1; bh=xbbllp0UjJ+kJNCXRMI/IkK8V5T27sfkwCeDyQ07v9w=; b=hfc4nHknWl5JS8bURajtCwJr9RqAjs8HRTBPzoVkk48CxjpQ93gNYWiDMN+JQw+UDHf/aiU/8n/Q40nqrJji6zZXvz+jMB+AvlxDuaiQJeDtOKoreGbz2R6Q6TF0b5tnIYK2y6lD6nOyhy4dsJVKQ3jeHPtcJOsMBZurTazSPa81MR3q04ihLC3S0Rl32EDjaeZioA81Hkutym+oita5JWa5p0S6NHbliNRM5dk1N3BXRYAZWad3swUkIQqUG7RMzqL8FSrmjch9MzvPkDK04pSKsyAHJDN/9O1TOTkllR8SmTfH+5mOP7zN521qc4DCvPwJli2/FFvb3ALMh2ajEQ==
ARC-Authentication-Results: i=1; mx.microsoft.com 1; spf=pass smtp.mailfrom=ll.mit.edu; dmarc=pass action=none header.from=ll.mit.edu; dkim=pass header.d=ll.mit.edu; arc=none
From: "Blumenthal, Uri - 0553 - MITLL" <uri@ll.mit.edu>
To: Leonid Shamis <shamis.leonid@gmail.com>, "tls@ietf.org" <tls@ietf.org>
Thread-Topic: [EXT] [TLS] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)
Thread-Index: AQHdB3ortTciOa0pykeDVjPnaMPKPbZU8cLx
Date: Mon, 29 Jun 2026 04:34:25 +0000
Message-ID: <BN0P110MB141924988BBC93DC351DD42290E8A@BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM>
References: <CAOhTJCYV_eZ3QXc3c+QEwKX==hwaTeNfd-THBA4bLr5Bw+vtYQ@mail.gmail.com>
In-Reply-To: <CAOhTJCYV_eZ3QXc3c+QEwKX==hwaTeNfd-THBA4bLr5Bw+vtYQ@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach: yes
X-MS-TNEF-Correlator:
x-ms-reactions: allow
x-ms-publictraffictype: Email
x-ms-traffictypediagnostic: BN0P110MB1419:EE_|PH3P110MB2103:EE_
x-ms-office365-filtering-correlation-id: e3f25cca-2dd7-4698-b882-08ded597ba0e
x-ms-exchange-senderadcheck: 1
x-microsoft-antispam: BCL:0;ARA:13230040|1800799024|6049299003|366016|23010399003|56012099006|18002099003|22082099003|8096899003|38070700021|4053099003;
x-microsoft-antispam-message-info: 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
x-forefront-antispam-report: CIP:255.255.255.255;CTRY:;LANG:en;SCL:1;SRV:;IPV:NLI;SFV:NSPM;H:BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM;PTR:;CAT:NONE;SFS:(13230040)(1800799024)(6049299003)(366016)(23010399003)(56012099006)(18002099003)(22082099003)(8096899003)(38070700021)(4053099003);DIR:OUT;SFP:1101;
x-ms-exchange-antispam-messagedata-chunkcount: 1
x-ms-exchange-antispam-messagedata-0: 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
Content-Type: multipart/signed; protocol="application/x-pkcs7-signature"; micalg="sha256"; boundary="_C34638E4-C414-9148-B9F5-A762199685C7_"
MIME-Version: 1.0
X-MS-Exchange-CrossTenant-AuthAs: Internal
X-MS-Exchange-CrossTenant-AuthSource: BN0P110MB1419.NAMP110.PROD.OUTLOOK.COM
X-MS-Exchange-CrossTenant-Network-Message-Id: e3f25cca-2dd7-4698-b882-08ded597ba0e
X-MS-Exchange-CrossTenant-originalarrivaltime: 29 Jun 2026 04:34:37.1024 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: 83d1efe3-698e-4819-911b-0a8fbe79d01c
X-MS-Exchange-Transport-CrossTenantHeadersStamped: PH3P110MB2103
X-Proofpoint-GUID: xN-pRBL0j1wYJPU9k985VWJ9tYkxfNh4
X-Proofpoint-Spam-Details-Enc: AW1haW4tMjYwNjI5MDAzNCBTYWx0ZWRfX6vR31wMUMi6j FoLSqVPy8eg6dCyyRHpaDpIRgRY7yMeINxm+8y4v/7ZLhfIH6k+OzfluXJ986RsMk7/tGJvaGxf JSTs35A6sjwcEoc0bOeaCQBIvusykWlqpExS6cd0wOcBEBlUW/9S8C/vH5VzmLSvKfzsv1317/Z +AeVAQrLAVFZWRa71GDRLvIGIB/RiMFu/KW8ctf0j573wE3T7yCASCr7rG6SRzXO9kIFejScSJG GR3I9IDD/Lr89TW3KdJBwtkiSeDG2C2rAeWX164ji53++dsv79zWUQM8NQ567Z5e/HM9m5Dr03B GPr54g0lPscoJaGhQx7G+INgt4RT1KJgoNdvU4kHC1ILSlB99DKbKRO3DgKlcX+Dj23AEoT3HbL slywi49yDnGCG82y6Bl4Slf6GrnwLA==
X-Proofpoint-Spam-Info: AW1haW4tMjYwNjI5MDAzNCBTYWx0ZWRfX2yJEUbA7aeop fAcMXIDt8ZjQFt/J4EWoGrSeBy8z56qA7+FvSQkasdDRVFA5mul9T5++pIPYBvMce86OOaXAs1Q 98/Lr95msfyqvOMNTfjcHR0UYRUr4LKKX8J1rSjSxdRVuN/Wc+z1
X-Proofpoint-ORIG-GUID: xN-pRBL0j1wYJPU9k985VWJ9tYkxfNh4
X-Authority-Analysis: v=2.4 cv=da6wG3Xe c=1 sm=1 tr=0 ts=6a41f5e2 cx=c_pps a=gKe/mLUEfoSu6txfIyclRw==:117 a=z/mQ4Ysz8XfWz/Q5cLBRGdckG28=:19 a=lCpzRmAYbLLaTzLvsPZ7Mbvzbb8=:19 a=xqWC_Br6kY4A:10 a=FelO9ux0wxsA:10 a=VkNPw1HP01LnGYTKEx00:22 a=6J-vbcjw2OQC1sJBszXA:22 a=0bWFOBTDAHS_4l02IRiL:22 a=8k5GSBKb4DOXMa7MUY4A:9 a=QEXdDO2ut3YA:10 a=wLvjaopNy58jVCvb:21 a=_W_S_7VecoQA:10 a=yiS_OlLFfiXx3336nRQA:9 a=ZVk8-NSrHBgA:10 a=30ssDGKg3p0A:10
X-Proofpoint-Virus-Version: vendor=baseguard engine=ICAP:2.0.293,Aquarius:18.0.1143,Hydra:6.1.125,FMLib:17.12.100.49 definitions=2026-06-29_01,2026-06-26_01,2025-10-01_01
X-Proofpoint-Spam-Details: rule=outbound_notspam policy=outbound score=0 bulkscore=0 adultscore=0 lowpriorityscore=0 phishscore=0 malwarescore=0 spamscore=0 suspectscore=0 classifier=typeunknown authscore=0 authtc= authcc= route=outbound adjust=0 reason=mlx scancount=1 engine=8.19.0-2606160000 definitions=main-2606290034
Message-ID-Hash: DMRJLSPH54GKQLY2HXGQA52VTHHZH5IV
X-Message-ID-Hash: DMRJLSPH54GKQLY2HXGQA52VTHHZH5IV
X-MailFrom: prvs=3640980a80=uri@ll.mit.edu
X-Mailman-Rule-Misses: dmarc-mitigation; no-senders; approved; emergency; loop; banned-address; member-moderation; header-match-tls.ietf.org-0; nonmember-moderation; administrivia; implicit-dest; max-recipients; max-size; news-moderation; no-subject; digests; suspicious-header
X-Mailman-Version: 3.3.9rc6
Precedence: list
Subject: [TLS] Re: [EXT] Re: WG Last Call: draft-ietf-tls-mlkem-08 (Ends 2026-07-08)
List-Id: "This is the mailing list for the Transport Layer Security working group of the IETF." <tls.ietf.org>
Archived-At: <https://mailarchive.ietf.org/arch/msg/tls/Geoit2Ush-EpJoqbLitJ2mrX-ko>
List-Archive: <https://mailarchive.ietf.org/arch/browse/tls>
List-Help: <mailto:tls-request@ietf.org?subject=help>
List-Owner: <mailto:tls-owner@ietf.org>
List-Post: <mailto:tls@ietf.org>
List-Subscribe: <mailto:tls-join@ietf.org>
List-Unsubscribe: <mailto:tls-leave@ietf.org>

> I would like to register my strong objection to the publication of this document.


We disagree.


> Hybrid ("double encryption") constructions protect us from classes of attacks that pure-PQ
> constructions do not protect us against. Hybrid constructions have a negligible overhead
> compared to pure-PQ constructions.


In theory only, ignoring all the practical implications of software and hardware implementations.
Unfortunately, our “stuff” has to function in a real world, not on paper.

v2.46.0 | Report a Bug | By Email | System Status